QUESTION: 33

Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfiltrated by an attacker. AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non-whitelisted programs.

What type of malware did the attacker use to bypass the company’s application whitelisting?

File-less malware
Zero-day malware
Phishing malware
Logic bomb malware

Answer(s): A

Reveal Solution Next Question

QUESTION: 34

Dorian is sending a digitally signed email to Poly. With which key is Dorian signing this message and how is Poly validating it?

Dorian is signing the message with his public key, and Poly will verify that the message came from Dorian by using Dorian’s private key.
Dorian is signing the message with Poly’s private key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Dorian is signing the message with his private key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Dorian is signing the message with Poly’s public key, and Poly will verify that the message came from Dorian by using Dorian’s public key.

Answer(s): C

Reveal Solution Next Question

QUESTION: 35

Scenario: Joe turns on his home computer to access personal online banking. When he enters the URL www.bank.com, the website is displayed, but it prompts him to re-enter his credentials as if he has never visited the site before. When he examines the website URL closer, he finds that the site is not secure and the web address appears different.

What type of attack he is experiencing?

DHCP spoofing
DoS attack
ARP cache poisoning
DNS hijacking

Answer(s): D

Reveal Solution Next Question

QUESTION: 36

Boney, a professional hacker, targets an organization for financial benefits. He performs an attack by sending his session ID using an MITM attack technique. Boney first obtains a valid session ID by logging into a service and later feeds the same session ID to the target employee. The session ID links the target employee to Boney’s account page without disclosing any information to the victim. When the target employee clicks on the link, all the sensitive payment details entered in a form are linked to Boney’s account.

What is the attack performed by Boney in the above scenario?

Forbidden attack
CRIME attack
Session donation attack
Session fixation attack

Answer(s): D

Reveal Solution Next Question

Free 312-50v13 Exam Braindumps

QUESTION: 33

QUESTION: 34

QUESTION: 35

QUESTION: 36

312-50v13 Exam Discussions & Posts